Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          f+HyvhFWisgyUuxmc35UIza9rmqqe6sHGAsYwF7KwMQ=
Subject key identifier:   24:39:C4:75:AE:3B:C5:CF:0B:74:6D:2C:23:C4:7B:8C:60:98:63:0E
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       01962F74B26727028A808399EEAB92FD0C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          032B
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
                          2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
                          3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: 2KIZb6MbwMTuKBoey8K9XOW9SeB73/d53qjcKXI/Q7M=)
                          4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
                          5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:67:27:02:8a:80:83:99:ee:ab:92:fd:0c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=2439c475ae3bc5cf0b746d2c23c47b8c6098630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:6c:95:89:ae:ba:ac:61:71:69:37:d1:97:
                    ff:4d:51:ca:6b:83:c2:9c:a5:42:89:a2:f5:85:a6:
                    d8:bd:46:7f:38:26:ce:e7:4a:16:49:9d:db:c2:83:
                    24:a8:68:d9:c4:e7:a8:cf:c0:f6:2a:33:87:47:10:
                    a3:77:f8:39:cc:ce:d9:2b:3e:06:e1:d0:b0:42:5c:
                    04:0b:e0:d0:9a:09:11:33:99:2b:c3:ab:ba:3c:c8:
                    61:ca:e0:bc:54:b9:a2:46:97:44:95:b1:f1:d8:c7:
                    a8:c9:8d:11:0a:b5:2f:f1:af:c5:ed:63:4c:d0:60:
                    0d:a5:41:cd:e4:81:cc:aa:1d:16:9c:a8:b3:45:18:
                    b0:eb:fe:97:10:e2:ff:91:1a:47:7c:e7:b8:34:2c:
                    f0:a7:86:28:90:b1:ba:07:37:27:86:56:22:b1:32:
                    34:fd:ba:62:b5:c8:cd:11:32:22:a6:f2:af:f8:0f:
                    b3:1c:0e:90:9c:f0:cb:16:48:f6:a7:eb:53:dc:e0:
                    4c:0a:6f:c0:d9:7c:c1:d2:7e:f9:77:8b:a4:0f:07:
                    60:cf:f1:06:5b:d9:e0:c9:13:f4:72:02:a0:8f:3a:
                    c3:a5:e2:d7:62:17:c8:1e:f9:67:21:65:70:45:a5:
                    f2:31:0a:26:0e:84:b8:a6:88:5a:75:72:a6:a0:31:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:C4:75:AE:3B:C5:CF:0B:74:6D:2C:23:C4:7B:8C:60:98:63:0E
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:59:0a:1a:94:a2:b2:9d:70:a2:f7:21:8c:04:b2:c6:88:
         ba:68:ed:0d:97:98:b1:7a:68:fc:fb:d8:bd:09:92:39:60:8c:
         a8:b9:53:20:40:50:0f:31:9b:f5:9d:48:de:d7:9e:30:2c:c3:
         59:31:ec:cc:d1:51:86:fa:55:38:c0:34:6f:16:e5:16:27:5b:
         29:26:0a:23:04:58:63:da:6b:6d:a7:0a:cf:c4:9f:30:37:5c:
         84:ca:40:b5:3b:81:eb:04:4c:71:d0:4a:7a:0a:cb:57:d5:fd:
         13:db:4f:a7:1e:3e:34:72:83:2c:8b:11:4b:42:8a:c1:3d:22:
         92:0b:8f:29:35:6b:00:95:48:6a:90:2a:1c:d3:d8:af:1a:48:
         f2:9a:ba:6a:2b:72:8d:fb:fd:29:c6:9b:05:26:93:f1:ea:e6:
         93:d9:cd:b8:40:81:ae:b5:2b:df:04:77:5d:3a:fd:eb:67:79:
         f8:34:f1:5f:09:c3:71:0c:ac:e1:b9:84:1b:0d:de:2c:22:91:
         03:2c:6a:88:30:c5:84:b0:b5:3e:ad:99:a4:54:1c:f5:60:5b:
         b6:16:4b:65:a9:29:82:b1:82:c3:a4:3f:5a:0c:6a:96:c8:2f:
         2d:d1:63:89:57:1f:a5:0f:bb:e1:09:43:65:a1:f0:1e:8d:95:
         c2:ba:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----